Crypto projects publish audits when they have to: a code audit, after the token is sold, because an exchange or a market maker asked. We did it the other way around. In July 2026 we put MintID through a full economic-viability audit — not of the code, but of the economics: the tokenomics, the unit economics, the solvency of every participant, the survivability of the project itself — against our own frozen document corpus, before genesis, before any sale, before anyone asked.
The authorship is on the cover: the audit was performed by Conectia PRO. That disclosure is worth being precise about. Conectia is a services company: it serves MintID as the protocol’s first implementer, and its only interest in the protocol is providing that service — it neither owns nor controls MintID. The two are related parties — they share a founder — which is exactly why the report names its author instead of implying an arm’s-length third party. And MintID itself is a blockchain protocol, founder-led only until it is autonomous: not anyone’s property, Conectia’s included. So read this as what it is — a related-party audit, run with audit discipline, published in full so you can judge the work rather than the name on it. The report is downloadable from this site, unedited. This post explains what it asked, what it found, and what the project did about it — within days.
The uncomfortable questions, on purpose
The audit took the perspective of a prospective investor and a prospective validator and asked the questions cheerleaders avoid: can every participant in this system be solvent? Does protocol revenue actually scale with adoption? Can the launch gate even be measured? Can the project survive to mainnet — and past it?
An audit this close to home earns exactly as much trust as its method shows, so the method is the point: it worked from the frozen corpus and public sources only, with line-level citation of every material claim, keeping documented fact, auditor arithmetic and auditor judgment explicitly separated — and every market figure was checked against independent external sources, which is where the corroboration gets its weight. The conclusions were binding on us: every finding had to be answered in writing, in the corpus, before genesis parameters could freeze.
The verdict, stated whole
We will only ever quote the opinion in full, because quoting it selectively is how audit-washing works. Here it is: a qualified opinion — five critical findings, seven high, ten medium, and twelve conditions precedent to a favourable one. None of the five critical findings was judged fatal, all of them were precise, and every one had to be remediated before genesis parameters freeze.
The same report also did us a favour no cheerleader ever could: it corroborated the market thesis against independent sources. Every market figure the corpus relies on — the more-than-a-billion-agents-by-2029 trajectory, the roughly 50:1 machine-to-human identity ratio, the x402 transaction economics we build against — checked out against external, independent sources cited in the report. And it confirmed that our niche — privacy-preserving, funded, regulated-grade agent identity — is real and served by no incumbent, while also confirming the risk we already knew: the transparent-identity competition is consolidating fast. The window is real in both directions.
Five critical findings, five written answers
The response was not a blog post. It was a single coordinated re-freeze of the entire corpus as v2.0: six architecture decision records, eleven documents revised or created, every change carrying an inline marker back to its recorded, ratified decision.
| The audit found | v2.0 answers |
|---|---|
| The genesis allocation policy contradicted itself — a declared band versus an incompatible working figure — on a decision that is irreversible by construction. | Resolved by recorded decision: the allocation is now ratified as bands — 15% development and team, 20–25% public tranche, at least 60% validator emission pool — with the final points commissioned to the independent simulation, constrained to those bands. |
| A circular launch dependency: no listing → no market price → an unmeasurable minimum-economic-security gate → professional validators that cannot be recruited. | The gate is re-denominated in four measurable, price-independent units — bonded share of supply, independent-operator count, a Nakamoto-coefficient floor, a published attack-cost methodology — and validators become contractable counterparties through fiat-denominated service agreements. |
| The funded-accountability layer hung on requirements that had no normative text in any live document — only a superseded archive draft that contradicted the current design. | The requirements now have live normative text in the v2.0 corpus. What existed only as citations is written, versioned and frozen. |
| No economic parameter existed beyond the hard cap, and the independent simulation that must produce them all had not been commissioned. | The bands are ratified, and the simulation is scoped as a funded statement of work with thirteen deliverables — every fee, band point, emission parameter and the arbiter-market sizing are its outputs, never ours. |
| Protocol revenue was structurally decoupled from adoption, and the validator security budget had no documented successor once emission runs out. | The two flows that scale with the agent population — per-agent mint/lease and consented disclosure — now carry normative, non-zero protocol cuts, partially burned; and the post-emission security budget has a written answer: a modelled fee market whose successor options never include printing more tokens. |
That is what “the corpus is the source of truth” means when it costs something: the genesis-allocation contradiction is resolved by recorded decision, the requirements that existed only as citations now have live normative text, and the launch gate that was denominated in an unmeasurable unit is now denominated in four measurable ones.
What moved — and what refused to
The tokenomics moved from shape to policy. The posture is now: the mechanism is committed, the bands are ratified, the numbers are commissioned — to an independent simulation, not to us. The tokenomics page carries the full picture: the ratified bands, the four-year vesting with a one-year cliff and a twelve-month lock-up, and the rule that insider genesis accounts may not delegate, may not vote, and do not count toward the launch-security gate.
Survivability stopped being an implicit promise. The launch is financed by the project’s own public tranche through the complete EU MiCA Title II path — executed deliberately, as policy, with a published budget annex through mainnet plus twelve months and a hard floor rule: miss the floor, re-stage the scope, never launch under-audited. And the launch itself is now staged — a verified-identity MVP first, the funded-recourse rail later, on a published demand criterion, behind its own audits. The roadmap shows both stages and the three engagements on the critical path.
What did not move is the part we consider load-bearing: the hard cap of 108,000,000, immutable. Verification free by construction. Presentations off-chain, always. Consensus revenue firewalled from service revenue. And nothing for sale — stated on the site, visibly, until the day a MiCA-notified offer exists or it never does.
Why publish it
An audit you run against yourself, publish against yourself — findings, name and all — and answer in one release: that is the transparency budget most projects spend on adjectives. The report is attachable by design; read it before you read anything else we wrote, and hold the v2.0 corpus to it.